generated: '2026-07-21'
method: derived
source: https://documentation.simpliroute.com/
standards:
  - id: rest
    conforms: true
    evidence: Resource-oriented URLs and HTTP verbs over a single versioned base (/v1/).
  - id: json
    conforms: true
    evidence: All responses (including errors) are application/json.
  - id: api-key-auth
    conforms: true
    evidence: Authorization header Token scheme documented.
  - id: oauth2
    conforms: false
    evidence: No OAuth2 authorization/token endpoints documented.
  - id: oidc
    conforms: false
  - id: webhooks
    conforms: true
    evidence: Outbound webhook subscriptions for plan/route/checkout lifecycle events.
  - id: rfc9457-problem-details
    conforms: false
    evidence: Errors use plain HTTP status codes + JSON, not application/problem+json.
  - id: cors
    conforms: true
    evidence: Docs state cross-origin resource sharing is supported.
  - id: fhir-r4
    conforms: false
  - id: fapi
    conforms: false
  - id: scim
    conforms: false
  - id: odata
    conforms: false
  - id: json-api
    conforms: false
notes:
  - No published compliance certifications (SOC 2 / ISO 27001 / PCI / HIPAA) were found on the public site; no Compliance pointer is emitted.